Password-Based Key Exchange Protocols for Cross-Realm
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
Authentication and key exchange are fundamental for establishing secure communication channels over public insecure networks. Password-based protocols for authenticated key exchange are designed to work even when user authentication is done via the use of passwords drawn from a small known set of values. There have been many protocols proposed over the years for password authenticated key exchange in the three-party scenario, in which two clients attempt to establish a secret key interacting with one same authentication server. However, little has been done for password authenticated key exchange in the more general and realistic four-party setting, where two clients trying to establish a secret key are registered with different authentication servers. In fact, the recent protocol by Yeh and Sun seems to be the only password authenticated key exchange protocol in the four-party setting. But, the Yeh-Sun protocol adopts the so called “hybrid model”, in which each client needs not only to remember a password shared with the server but also to store and manage the server’s public key. In some sense, this hybrid approach obviates the reason for considering password authenticated protocols in the first place; it is difficult for humans to securely manage long cryptographic keys. In this work, we introduce a key agreement protocol and a key distribution protocol, respectively, that requires each client only to remember a password shared with its authentication server.
Abstract
Authentication and key exchange are fundamental for establishing secure communication channels over public insecure networks. Password-based protocols for authenticated key exchange are designed to work even when user authentication is done via the use of passwords drawn from a small known set of values. There have been many protocols proposed over the years for password authenticated key exchange in the three-party scenario, in which two clients attempt to establish a secret key interacting with one same authentication server. However, little has been done for password authenticated key exchange in the more general and realistic four-party setting, where two clients trying to establish a secret key are registered with different authentication servers. In fact, the recent protocol by Yeh and Sun seems to be the only password authenticated key exchange protocol in the four-party setting. But, the Yeh-Sun protocol adopts the so called “hybrid model”, in which each client needs not only to remember a password shared with the server but also to store and manage the server’s public key. In some sense, this hybrid approach obviates the reason for considering password authenticated protocols in the first place; it is difficult for humans to securely manage long cryptographic keys. In this work, we introduce a key agreement protocol and a key distribution protocol, respectively, that requires each client only to remember a password shared with its authentication server.
참고문헌 (21)
- M. Abdalla, "Password-based authenticated key exchange in the three-party setting", Proceedings of 8th International Workshop on Practice and Theory in Public Key Cryptography (PKC 2005), 통권 : 3386, pp.65~84 (2005)
- M. Bellare, "Authenticated encryption: Relations among notions and analysis of the generic composition paradigm", Advances in Cryptology - Asiacrypt 2000, 통권 : 1976, pp.531~545 (2000)
- M. Bellare, "Authenticated key exchange secure against dictionary attacks", Advances in Cryptology - Eurocrypt 2000, 통권 : 1807, pp.139~155 (2000)
- M. Bellare, "Random oracles are practical: A paradigm for designing e±cient protocols", Proceedings of the 1st ACM Conferences on Computer and Communications Security (CCS 1993), pp.62~73 (1993)
- E. Bresson, "Provably authenticated group Diffie-Hellman key exchange", Proceedings of the 8th ACM conference on Computer and Communications Security (CCS 2001), pp.255~264 (2001)
- M. Burmester, "A secure and efficient conference key distribution system", Advances in Cryptology Eurocrypt'94, 통권 : 950, pp.275~286 (1995)
- W. Di±e, "Authentication and authenticated key exchanges", Designs, Codes, and Cryptography, 2(2), pp.107~125 (1992)
- Y. Ding, "Undectectable on-line password guessing attacks", ACM SIGOPS Operating Systems Review, 29(4), pp.77~86 (1995)
- D. Dolev, "Nonmalleable cryptography", SIAM Journal on Computing, 30(2), pp.391~437 (2003)
- "IEEE P1363. 2: Password-based public-key cryptography"[URL]
- S. Goldwasser, "A digital signature scheme secure against adaptive chosen-message attacks", SIAM Journal of Computing, 17(2), pp.281~308 (1988)
- Y. Gang, "Improved Client-to-Client Password-Authenticated Key Exchange Protocol", The Second International Conference on Availability, Reliability and Security (ARES'07), pp.564~574 (2007)
- L. Gong, "Protecting poorly chosen secrets from guessing attacks", IEEE Journal on Selected Areas in Communications, 11(5), pp.648~656 (1993)
- J. Katz, "Unforgeable encryption and adaptively secure modes of operation", Proceedings of 7th International Workshop on Fast Software Encryption (FSE 2000), 통권 : 1978, pp.284~299 (2000)
- T. Kwon, "An improvement of the password-based authentication protocol (K1P) on security against replay attacks", IEICE Transactions on Communications, E82-B(7), pp.991~997 (1999)
- Y. Lee, "An Inter-domain key Agreement Protocol Using Weak Passwords", LNCS, 3982, pp.517~526 (2006)
- C. -L. Lin, "Three-party encrypted key exchange: attacks and a solution", ACM SIGOPS Operating Systems Review, 34(4), pp.12~20 (2000)
- P. Rogaway, "OCB: A block-cipher mode of operation for efficient authenticated encryption", Proceedings of the 8th ACM conference on Computer and Communications Security (CCS 2001), pp.196~205 (2001)
- M. Steiner, "Refinement and extension of encrpyted key exchange", ACM SIGOPS Operating Systems Review, 29(3), pp.22~30 (1995)
- H. -T. Yeh, "Password authenticated key exchange protocols among diverse network domains", Computers and Electrical Engineering, 31(3), pp.175~189 (2005)
- F. Zhou, "Cryptanalysis and Improvement of EC2C-PAKA Protocol in Cross-Realm", 2008 IFIP International Conference on Network and Parallel Computing, pp.82~87 (2008)